- rsbac-commit - rsbac.org

linux-5.4.y 5.4.250 commit 14a88d0b73e3 Add missing put_pid in do_accept().
by Amon Ott 25 Jul '23

25 Jul '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.4.y.git;a=summary RSBAC for Linux 5.4 (Long Term) Current version: 5.4.250 commit 14a88d0b73e33e514733a8f69fd12bf759e4b3e8 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Apr 5 13:01:16 2023 +0200 Add missing put_pid in do_accept(). net/socket.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-)

1 0

linux-5.10.y 5.10.187 commit d9134f47a116 __sys_setresuid(), __sys_setresgid(): move RSBAC check behind no-op
by Amon Ott 25 Jul '23

25 Jul '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.10.y.git;a=summary RSBAC for Linux 5.10 (Long Term) Current version: 5.10.187 commit d9134f47a116ee7dfc33a97c04bc1840cbc8f5c0 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Jun 6 08:09:56 2023 +0200 __sys_setresuid(), __sys_setresgid(): move RSBAC check behind no-op check. Instead of checking RSBAC first, just disable the no-op check, if RSBAC is enabled. This also restores correct notification in this special case. kernel/sys.c | 72 ++++++++++++++++++++++++++++++++---------------------------- 1 file changed, 38 insertions(+), 34 deletions(-)

1 0

linux-5.15.y 5.15.122 commit 2aee0ecb3a07 __sys_setresuid(), __sys_setresgid(): move RSBAC check behind no-op
by Amon Ott 25 Jul '23

25 Jul '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.15.y.git;a=summary RSBAC for Linux 5.15 (Long Term) Current version: 5.15.122 commit 2aee0ecb3a070b6e16b4cccd35fbe469b6244789 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Jun 6 08:02:25 2023 +0200 __sys_setresuid(), __sys_setresgid(): move RSBAC check behind no-op check. Instead of checking RSBAC first, just disable the no-op check, if RSBAC is enabled. This also restores correct notification in this special case. kernel/sys.c | 125 +++++++++++++++++++++++++++++++---------------------------- 1 file changed, 66 insertions(+), 59 deletions(-)

1 0

linux-6.1.y 6.1.41 commit 45c6ed454ee5 namei.c: move DELETE and RENAME notifications before unlock to avoi
by Amon Ott 25 Jul '23

25 Jul '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.41 commit 45c6ed454ee57c43fc505aae9690c86ec69bc9f3 Author: Amon Ott <ao(a)rsbac.org> Date: Mon Jul 24 11:40:33 2023 +0200 namei.c: move DELETE and RENAME notifications before unlock to avoid race. fs/namei.c | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-)

1 0

linux-6.1.y 6.1.40 commit 171b0c25bd2c namei.c: move DELETE and RENAME notifications before unlock to avoi
by Amon Ott 24 Jul '23

24 Jul '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.40 commit 171b0c25bd2c03900a4230d65c7031629722e769 Author: Amon Ott <ao(a)rsbac.org> Date: Mon Jul 24 11:40:33 2023 +0200 namei.c: move DELETE and RENAME notifications before unlock to avoid race. fs/namei.c | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-)

1 0

linux-5.15.y 5.15.121 commit 10f2ba223cf2 __sys_setresuid(), __sys_setresgid(): move RSBAC check behind no-op
by Amon Ott 24 Jul '23

24 Jul '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.15.y.git;a=summary RSBAC for Linux 5.15 (Long Term) Current version: 5.15.121 commit 10f2ba223cf2cc10debaab47677308da2f913a21 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Jun 6 08:02:25 2023 +0200 __sys_setresuid(), __sys_setresgid(): move RSBAC check behind no-op check. Instead of checking RSBAC first, just disable the no-op check, if RSBAC is enabled. This also restores correct notification in this special case. kernel/sys.c | 125 +++++++++++++++++++++++++++++++---------------------------- 1 file changed, 66 insertions(+), 59 deletions(-)

1 0

linux-6.1.y 6.1.40 commit 00a6be660f7e rsbacd: still trigger list rehashing, if rsbac_debug_no_write is en
by Amon Ott 24 Jul '23

24 Jul '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.40 commit 00a6be660f7e3a39aaa26c48771043cac7671ce8 Author: Amon Ott <ao(a)rsbac.org> Date: Fri Jul 21 08:33:53 2023 +0200 rsbacd: still trigger list rehashing, if rsbac_debug_no_write is enabled. rsbac/data_structures/aci_data_structures.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-)

1 0

linux-6.1.y 6.1.39 commit 601ac20cd6dc rsbacd: still trigger list rehashing, if rsbac_debug_no_write is en
by Amon Ott 21 Jul '23

21 Jul '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.39 commit 601ac20cd6dc1988444b070aecebcc04c56bdd40 Author: Amon Ott <ao(a)rsbac.org> Date: Fri Jul 21 08:33:53 2023 +0200 rsbacd: still trigger list rehashing, if rsbac_debug_no_write is enabled. rsbac/data_structures/aci_data_structures.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-)

1 0

linux-6.1.y 6.1.39 commit c83ba3ac9725 __sys_setresuid(), __sys_setresgid(): move RSBAC check behind no-op
by Amon Ott 20 Jul '23

20 Jul '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.39 commit c83ba3ac97250f202ae7aed862c4baee2d77495c Author: Amon Ott <ao(a)rsbac.org> Date: Tue Jun 6 07:59:56 2023 +0200 __sys_setresuid(), __sys_setresgid(): move RSBAC check behind no-op check. Instead of checking RSBAC first, just disable the no-op check, if RSBAC is enabled. This also restores correct notification in this special case. kernel/sys.c | 125 +++++++++++++++++++++++++++++++---------------------------- 1 file changed, 66 insertions(+), 59 deletions(-)

1 0

linux-5.15.y 5.15.120 commit e438dfc0f235 __sys_setresuid(), __sys_setresgid(): move RSBAC check behind no-op
by Amon Ott 06 Jul '23

06 Jul '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.15.y.git;a=summary RSBAC for Linux 5.15 (Long Term) Current version: 5.15.120 commit e438dfc0f23546426dca714a9389882208482db8 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Jun 6 08:02:25 2023 +0200 __sys_setresuid(), __sys_setresgid(): move RSBAC check behind no-op check. Instead of checking RSBAC first, just disable the no-op check, if RSBAC is enabled. This also restores correct notification in this special case. kernel/sys.c | 125 +++++++++++++++++++++++++++++++---------------------------- 1 file changed, 66 insertions(+), 59 deletions(-)

1 0

2025

2024

2023

2022

rsbac-commit